Update a field definition

Server: https://{kibana_url}
  • PUT /api/cases/field_definitions/{field_definition_id}
  • PUT /s/{space_id}/api/cases/field_definitions/{field_definition_id}

Refer to Spaces for more information.

Updates editable attributes of a field definition. Server-managed attributes (displayOrder, legacyKey) are preserved. You must have the "Manage templates" sub-privilege for the Cases feature of the owning solution. A field's name and YAML type are immutable after creation — an attempt to change either returns 409 with attributes.code = "field_identity_immutable" and attributes.changed listing which identity attributes were modified. Setting isGlobal to false when the field is linked to an active custom field in the Cases configuration returns 409; otherwise demotion is allowed. Requires the Cases feature to be enabled in the space. Use dry_run=true to validate the request without writing anything.

Path Parameters

field_definition_id string · max: 36 required

The identifier for the field definition.

Query Parameters

dry_run boolean · default: false

When true, runs authorization, body, and identity-immutability validation without updating the field definition. Returns { "valid": true } on success.

Responses